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(54) [Title of the Invention] Gateway Apparatus 

(57) [Abstract] 
[Object] 

An object of the present invention is to allow a 
user to access an external database transparently to 
the user by using hypertext without using a special 
client and without sacrificing security. 
[Constitution] 

A link replacing unit for replacing a link in a 
hypertext and a link changing device for changing the 
link are provided in a hypertext changing device 4, 
wherein when the link replacing device receives a 
hypertext, the link changing device changes link 
information in accordance with given processing means 
and then the link replacing device outputs the 
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hypertext in which the link information has been 
changed . 

[Claims] 
5 [Claim 1] 

A gateway apparatus comprising a hypertext 
changing device , 

the hypertext changing device including: 

link replacing means for replacing a link in a 
10 hypertext ; and 

link changing means for changing the link; 

wherein, when the link replacing means receives a 
hypertext, the link changing means changes link 
information in the hypertext according to given 
15 processing means; and then 

the link replacing means outputs the hypertext in 
which the link information has been changed. 
[Claim 2] 

A gateway apparatus comprising a hypertext 
20 generating device, 

the hypertext generating device including: 
hypertext generating means for converting 
information into a hypertext; and 

link setting means for generating a link; 
25 wherein the hypertext generating means converts 

obtained information into a hypertext; 
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the link setting means changes link information 
according to given processing means; and then 

the hypertext generating means outputs the 
hypertext in which the link information has been 
5 changed . 
[Claim 3] 

The gateway apparatus according to claim 1 or 2, 
wherein means for adding information for re -accessing 
the same gateway is provided as the given processing 
10 means for changing link information. 
[Claim 4] 

The gateway apparatus according to claim 1 or 2, 
wherein means for adding information for re -accessing 
the same gateway or accessing a different gateway is 
15 provided as the given processing means for changing 
link information. 
[Claim 5] 

The gateway apparatus according to claim 1 or 2, 
wherein means for providing information for accessing a 
20 different server is provided as the given processing 
means for changing link information. 
[Claim 6] 

A gateway apparatus comprising: 
a link analyzing device which receives link 
25 information and analyzes the link information; 

a network services access control device which 
accesses a server to obtain information on the basis of 
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access information provided from the link analyzing 
device ; 

a hypertext changing device which, if the obtained 
information is a hypertext, changes the link 
information in the hypertext according to given 
processing means; and 

a hypertext generating device which, if the 
obtained information is not a hypertext, converting the 
obtained information into a hypertext and changing the 
link information according to given processing means. 
[Claim 7] 

The gateway apparatus according to claim 6, 
wherein means for adding information for re-accessing 
the same gateway is provided as the given processing 
means for changing link information. 
[Claim 8] 

The gateway apparatus according to claim 6, 
wherein means for adding information for re-accessing 
the same gateway or accessing a different gateway is 
provided as the given processing means for changing 
link information. 
[Claim 9] 

The gateway apparatus according to claim 6, 
wherein means for providing information for accessing a 
different server is provided as the given processing 
means for changing link information. 
[Detailed Description of the Invention] 
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[0001] 

[Field of the Invention] 

The present invention relates to an apparatus 
which changes a link in a hypertext or implementing a 
5 gateway by a hypertext . 
[0002] 

Various databases distributed on a network and 
clients which access the databases have been emerging 
in recent years. Protocols supporting them include 

10 Local File System, FTP, Internet News, TELNET, WAIS, 
GOPHER, and WWW (World Wide Web) HTTP (Hyper Text 
Transfer Protocol) . In the WWW, particularly, servers 
using protocols different from those used by clients 
are accessed directly or through gateways and results 

15 of the access are converted to hypertexts and the 
hypertexts are ultimately presented to users. 
[0003] 

While various kinds of information can be readily 
obtained in this way, many organizations such as 
20 companies that must ensure the security of information 
restricts access to external sources. However, as 
various databases on a network are enhanced, demand for 
straightforward access to their data is growing. 
[0004] 

25 Therefore, there is need for providing users with 

access to external databases in a manner similar to 
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accessing internal databases, that is, transparent 
access, while ensuring required database security. 
[0005] 
[Prior Art] 

5 Terms used herein will be defined first . The term 

server refers to an entity that provides information to 
a client accessing the server by using a certain 
protocol . 
[0006] 

10 The term client refers an entity that obtains 

information held by a server by using a certain 
protocol and is typically implemented by software. The 
term protocol refers to a set of rules for 
communication between computers for a certain purpose 

15 (such as exchange of a file). 
[0007] 

Hypertext is a way to present information, in 
which a number of words in a document works as links 
and, when such a word is selected, another document 
20 which is pointed to by the link is displayed. The 
document pointed to by a link may be a hypertext, 
normal text, a still image, video, sound, or any other 
element . 
[0008] 

25 A link is a character string that indicates how a 

document pointed to by the word can be accessed. A 
link is usually hidden from a user at a client where 
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information is displayed in hypertext format . A link 
is a character string containing information such as 
"which file on which machine is to be accessed with 
which protocol". 
[0009] 

There are methods in the prior art for directly 
accessing an external server provided on a network 
external to an organization from a computer internal to 
the organization, rather than a computer on the 
external network. 
[0010] 

One typical way to ensure the security of the 
organization in such a case is as follows . The network 
external to the organization is connected to the 
internal network through a router. The router places 
restrictions on protocols that are allowed to pass 
through the router and the allowed direction and uses 
the restrictions as a firewall to ensure the internal 
security of the organization. 
[0011] 

Figures 9 and 10 are schematic diagrams for 
explaining examples of the conventional art. A first 
example of the conventional art shown in Figure 9 will 
be described below. A network 11 internal to an 
organization in Figure 9 includes a compute 14 which is 
used by a user 13. Connected onto a network 12 
external to the organization are computers 16 and 
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servers (not shown) which use various protocols such as 
ETP , TELNET, WAIS, GOPHER, and HTTP. The internal 
network 11 and the external network 12 are 
interconnected through a router 15 which allows only 
5 limited protocols to pass through it. 
[0012] 

A way to provide access to external entities in 
such an environment is to allow some computers (only 
one of them is shown) provided on a network external to 

10 the organization to be accessed from the organization 

through the use of a certain protocol such as TELNET or 
ETP. If a user 13 using a computer 14 on the network 
internal to the organization wants to access an 
external machine, the user first access a computer 16 

15 provided on the external network 12 from the computer, 
which is a machine internal to the organization, 
through a router 15 by using TELNET, for example, and 
then accesses to the external machine by using any of 
various protocols to which the protocol is converted on 

20 the computer 16 to obtain information. 
[0013] 

Another way to provide access to entities external 
to an organization while ensuring the security in the 
organization is shown in Figure 10 as a second example 
25 of the conventional art. The example will be described 
below with respect to Figure 10. In Figure 10, the 
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same elements as those in Figure 9 are denoted by the 

same reference numerals. 

[0014] 

In Figure 10, a new protocol, ZZZ (which is a 
5 provisional name) is allowed to pass through a router 
15. A computer 14, which is a client that uses a 
protocol that cannot pass through the router 15, such 
as GOPHER or HTTP, is changed to a special client 17 
that uses the protocol ZZZ . Also, a ZZZ server 18, 
10 which is a gateway apparatus, is provided in a network 
12 external to the organization. 
[0015] 

If a user 13 wants to access an external machine 
from a network 11 internal to the organization, the 

15 user 13 first accesses the ZZZ server running on the 
computer 16 on the external network 12 through the 
router 15 by using the protocol ZZZ. Then, the ZZZ 
server 18, on behalf of the client 17, accesses a 
GOPHER or HTTP server, for example, on the external 

20 network 12 and returns the server's information to the 
client 17. 
[0016] 

[Problems to be Solved by the Invention] 

The conventional -art techniques described above 
25 have the following problems. The technique that uses a 
computer 16 on an external network 12 as in the first 
example of the conventional art is complex because it 
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involves procedures such as a login procedure for first 
accessing the computer 16. Another drawback is that if 
a user wants to communicate with an external server 
from the user's computer 14 on the network internal to 
5 the organization by directly using a given protocol, 
the user cannot use an ordinary client to do so. For 
example, a user who wants to use a window-based client 
that displays graphics on the user's computer 14 cannot 
use the client because the router 15 allows only 
10 character-base protocols such as TELNET to pass through 
it. 

[0017] 

The conventional technique that uses a special 
client 17 such as the protocol ZZZ as in the second 

15 example allows a user to use a client on the user's 

computer. However, the client cannot readily be used. 
The ordinary client to be used must be changed to a 
special client 17 capable of performing communications 
using a special protocol, ZZZ. 

20 [0018] 

An object of he present invention is to provide 
access to an external database by using a hypertext 
transparently to users, without using a special client 
and without scarifying security. 
25 [0019] 

[Means for Solving the Problems] 
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To solve the problems , the present invention is 
configured as follows. Figure 1 is a diagram for 
explaining the principle of the present invention. 
Provided in a gateway apparatus 1 in Figure 1 are a 
5 link analyzing device 2 which analyzes link information, 
a network services access control device 3 which 
accesses various network servers to obtain specified 
information, a hypertext changing device 4 which 
changes the hypertext of obtained information, and a 
10 hypertext generating device 5 which converts obtained 
information into hypertext. 
[0020] 
[Operation] 

Operation of the present invention based on the 
15 configuration described above will be described with 

respect to Figure 1. First, the link analyzing device 
2 receives information about a link. The link 
analyzing device 2 analyzes the link, converting the 
information into access information for making access, 
20 and provides the access information to the network 

services access control device 3. The network services 
access control device 3 accesses various network 
servers according to the access information and obtains 
information specified in the access information. If 
25 the obtained information is a hypertext, the network 

services access control device 3 provides the hypertext 
to the hypertext changing device 4 . The hypertext 
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changing device 4 outputs a hypertext in which the link 
information in the obtained information is rewritten 
(modified) according to a given processing method in 
such a manner that the gateway apparatus 1 or another 
5 gateway apparatus or another server is accessed. 
[0021] 

If the obtained information is not a hypertext, 
the network services access control device 3 provides 
the obtained information to the hypertext generating 

10 device 5. Then, the hypertext generating device 5 

outputs a hypertext in which the link information in 
the obtained information is set in such a manner as to 
access the gateway apparatus 1 or another gateway 
apparatus or another server. 

15 [0022] 

Provision of the gateway apparatus 1 on the 
external network 12 enables a computer on a network 
internal to an organization to access resources on the 
external network by using a client which is based on 
20 ordinary hypertext without scarifying security. 
[0023] 

[ Embodiments ] 

Embodiments of the present invention will be 
described with respect to Figures 2 to 8 . Like 
25 elements are labeled with like reference numerals 
throughout the drawings . 
[0024] 
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Figure 2 is a block diagram of a gateway apparatus 
in an embodiment of the present invention. A network 
controller 7 controls communications performed over. a 
network. An access monitor and control device 6 
5 monitors the network controller 7 to see whether there 
is access. 
[0025] 

If there is access from a client, the access 
monitor and control device 6 provides link information 

10 provided by the client to the gateway apparatus 1. The 
gateway apparatus 1 returns a hypertext having a 
special link to the access monitor and control device 6 . 
With this, the access monitor and control device 6 
controls the network controller 7 to return the hyper 

15 text to the accessing client. 
[0026] 

In this case, a link in the hypertext can be 
written in such a manner that a target pointed to by 
the original link is accessed from the gateway 
20 apparatus 1 after the gateway is re-accessed. With 
this, the gateway will be automatically re-accessed 
when a user using the client selects the link. 
[0027] 

Figure 3 is a diagram for explaining a hypertext 
25 changing device of the gateway apparatus 1. Provided 

in the hypertext changing device 4 are a link replacing 
unit 41 and a link changing unit 42. 
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[0028] 

A process performed when the hypertext changing 
device 4 receives a hypertext as an input will be 
described below. First, the link replacing unit 41 
5 receives a hypertext. The link replacing unit 41 

extracts a link from the hypertext and provides it to 
the link changing unit 42. The link changing unit 42 
converts the link according to a predetermined 
processing method (so that the gateway 1 is accessed, 
10 for example) and provides the changed link to the link 
replacing unit 41. 
[0029] 

The link replacing unit 41 replaces the extracted 
original link in the hypertext with the changed link 

15 and outputs the resulting hypertext. Figure 4 is a 

diagram for explaining a hypertext generating device of 
the gateway apparatus. Provided in the hypertext 
generating device 5 are a hypertext generating unit 51 
and a link setting unit 52. 

20 [0030] 

A process performed when the hypertext generating 
device 5 receives obtained information as an input will 
be described below. The hypertext generating unit 51 
receives obtained information in various formats such 
25 as FTP and GOPHER. The hyper text generating unit 51 
converts the information, excluding a link, into a 
hypertext in an ordinary manner. When generating the 
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link portion, the hypertext generating unit 51 provides 
a required control signal (information) to the link 
setting unit 52. 
[0031] 

The link setting unit 52 generates a link 
according to a predetermined processing method and 
provides the link to the hypertext generating unit 51. 
Then, the hypertext generating unit 51 integrates the 
link into the hypertext in an ordinary way and outputs 
the resulting hypertext. 
[0032] 

For example, if he obtained information is 
(protocol A + server A + additional information), 
and if the link setting unit 52 is to rewrite the 
information so that the gateway apparatus 1 is accessed, 
the link setting unit 52 adds link information such 
that 

protocol + gateway + (protocol A + server + 
additional information). 
[0033] 

The added link information is hidden from and 
transparent to the user of the client. Accordingly, 
the user feels like the user can access servers on the 
external network from the network internal to the 
organization smoothly as if the user were running the 
client on the external network. 
[0034] 
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Figure 5 is a flowchart of an embodiment of the 
present invention. Operation of the gateway apparatus 
1 will be described below with respect to the flowchart 
in Figure 5. SI to S9 are the numbers of steps. 
5 [0035] 

First, the access monitor and control device 6 
determines whether there is access from a client (SI). 
If there is access from a client, the access monitor 
and control device 6 receives link information and 

10 provides it to a link analyzing device 2 (S2). The 

link analyzing device 2 extracts access information and 
provides it to the network services access control 
device 3 (S3). The network services access control 
device 3 obtains specified information on the basis of 

15 the access information through a network controller 7 
(S4). 
[0036] 

The network services access control device 3 
determines whether or not the obtained information is a 

20 hypertext (S5). If the obtained information is a 

hypertext (Yes), the network services access control 
device 3 provides the obtained information (hypertext) 
to the hypertext changing device 4, which in tern 
changes the obtained information according to a 

25 predetermined process (S6). If it is determined at 
step S5 that the obtained information is not a 
hypertext (No), the various network services access 
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control device 3 provides the obtained information to 
the hypertext generating device 5, which then changes 
the link information ordinarily generated, according to 
a predetermined process, and outputs the hypertext (S7). 
5 [0037] 

The hypertext processed at step S6 or S7 is 
provided to the access monitor and control device 6 
(S8). The access monitor and control device 6 returns 
the hypertext to the client through the network 
10 controller 7 (S9). 
[0038] 

Figure 6 is a diagram for explaining server access 
in an embodiment. The server access will be described 
below with respect to Figure 6. Provided in an 

15 external network 12 in Figure 6 are a gateway 

apparatuses la, lb, and servers 20 to 22. Provided in 
a network 11 internal to an organization are a gateway 
apparatus lc, a computer 14, and servers 23, 24. A 
router 15 interconnects the internal network 11 and the 

20 external network 12 and allows only limited protocols 
such as TELNET, FTP, and HTTP to pass through it. 
[0039] 

The gateway apparatus la is provided on the 
external network 12 in order to allow a user 13 to 
25 access an external server 20 from the computer 14 on 
the internal network 11 while ensuring security. The 
router 15 allows the HTTP protocol, which is a protocol 



- 17 - 



English translation of JPA08-044643 



for exchanging hypertexts, to pass through it from the 
internal network 11, in addition to the protocols (for 
example TELNET and ETP) that the router 15 usually 
allows to pass through it. 
5 [0040] 

Therefore, once a resource on the server 20 on the 
external network is accessed through the gateway 
apparatus la, all results of access are returned as 
hypertexts and links are set so that the gateway 

10 apparatus la is always accessed. Because links are set 
in such a manner that the gateway apparatus la is 
accessed every time the access process is performed 
subsequently, the gateway apparatus la is accessed 
first whenever the client user 13 selects the link, 

15 [0041] 

If a number of gateway apparatuses la of this type 
(for example gateway apparatus lb) are provided on the 
external network 12, load can be distributed among the 
gateway apparatuses la, lb by selecting one of the 
20 gateway apparatuses appropriately and describing it in 
links . 
[0042] 

For example, a target of an original link may be 
analyzed and the gateway apparatus closes to the 
25 linked- to target may be selected. Alternatively, 

depending on a load on a gateway apparatus la, another 
gateway apparatus lb may be selected. Or, a gateway 
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apparatus may be selected at random (for example, using 
random numbers). Or alternatively, gateway apparatus 
having a less load may be selected through 
communication between the gateways . 
5 [0043] 

Furthermore, a gateway that is more than a gateway 
for merely ensuring security can be implemented as 
follows . Information about resources at a number of 
locations (such as servers 23 and 24) on a network or 
10 resources with aliases on a network can be stored and 
used for rewriting a link on the gateway apparatus. 
[0044] 

For example, if equivalent resources are on 
servers 23 and 24, the link may be rewritten in such a 
15 manner that the load is appropriately distributed. If 
a resource equivalent to a resource on the external 
network 12 is on the internal network, a link may be 
rewritten so as to point the internal resource. 
[0045] 

20 Thus, users can efficiently access resources. A 

specific example of server access according to the 
present invention will be described below. A URL in 
the WWW will be described first. A URL (Universal 
Resource Locator) indicates a location of information. 

25 A URL consists three portions. An exemplary URL is 
shown below. 
[0046] 
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http : / /www . is . university . ac . jp /welcome . html 
The first portion preceding the colon ("http" in 
this example) indicates the protocol to be used for 
accessing the server. In this example, the first 
5 portion indicates HTTP (Hyper Text Transfer Protocol), 
which is the protocol for the WWW. 
[0047] 

The next portion between "://" and " /" indicates 
the name of the server. In this case, it is indicated 

10 that the specified information is on the machine at 
"www.is.university.ac.Jp". (It should be noted that 
this portion may include information indicating the 
port of the server to be accessed. ) The remaining 
portion indicates the path to the information at the 

15 server. In this example, it is "welcome.html". 
[0048] 

Figure 7 is a diagram, for explaining a specific 
example of server access, showing an example of a WWW 
gateway. In this example, a network 11 internal to an 

20 organization (company) includes a computer (client) 14, 
a gateway apparatus 1 machine directly connected to an 
external network 12 (external to the company), and the 
internal and external networks are interconnected 
through a router 15, which allows HTTP communications 

25 to pass through it. Here, the gateway apparatus 1 
machine is provisionally given the name of 
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"www. out .company coop" . HTTP servers 25, 26 and an FTP 
server 27 are provided on the external network 12. 
[0049] 

Assume that a user 13 wants to a Web page of the 
5 information science department of a university having 
the URL "http : / /www . is . university . ac . jp/welcome . html " . 
The user 13 first specifies on a client 14 the 
following URL, instead of the ordinary URL. 
[0050] 
10 htt: //www- 

out . company . co . jp/http : //www. is . university . ac . jp/welcom 
e . html 

The client 14 interprets the URL and accesses the 
gateway apparatus 1 having the machine name "www- 

15 out.company.co.jp" by using HTTP. The router is set so 
as to allow clients on the internal network to access a 
particular machine on the external network by using a 
certain protocol. The router 15 in this example is set 
so as to allow HTTP communication to pass through it. 

20 Accordingly, the client 14 can reach the gateway 

apparatus 1 machine. The client 14 indicates the path 
"http : / /www . is . university . ac . jp/welcome . html " to the 
gateway apparatus 1 machine. 
[0051] 

25 The gateway apparatus 1 machine uses the given 

path to attempt to access the server 25 (with the 
server name of "www.is.university.ac. jp" ) . Because the 



- 21 - 



English translation of JPA08-044643 

gateway apparatus 1 machine is directly connected to 
the external network 12, it can successfully access 
such server machines. Then, the gateway apparatus 1 
obtains the following information, 
5 [0052] 

<HTML> 

<HEAD> 

<TITLE> 

Welcome Message (ABC Univ--Dept Info Sci ) 
10 </TITLE> 
</HEAD> 
<BODY> 
<H1> 

Welcome to ABC University <p>— Department of 
15 Information Science. 
</Hl> 

Welcome to our WWW server! This is under 

development , though . 
<P> 

20 This WWW server is run by Department of 

Information Science , 

ABC University ( somewhere -cho , ABC, 
<A 

HREF= "http : //www . xyz . jp/ japan/ index/html" > Japan < /A> ) , 
25 which is a new department 

established in 1990. 

We have a collection of images on the 
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Earth f s environment (in preparation) and 
<A HREF="/FTP/images/sat/ n > 
weather inf ormation</A> . 
We also serve 

<A HREF- " /FTP/images/sat /gms . polar/ " > 
GMS (Himawari) images </A> 
for Chugoku/Shikoku area. 
<P> 

</BODY> 
</HTML> 

Here, <HTML> indicates the start of the document 
written in HTML (Hyper Text Markup Language) and 
</HTML> indicates the end of the document. <HEAD> 
indicates the start of the header of the document. 
This header may be a title name or author name. Here, 
the title name is written. </HEAD> indicates the end 
of the header. <TITLE> indicates the start of the 
title. </TITLE> indicates the end of the title. 
<BODY> indicates the body of the document and </BODY> 
indicates the end of the document. <H1> indicates the 
start of a level 1 section and </Hl> indicates the end 
of the level 1 section. <P> indicates the start of a 
paragraph; an indication of the end of a paragraph is 
not necessary. 
[0053] 

The hypertext changing device 4 of the gateway 
apparatus 1 modifies the information given above by 
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changing the information "<A HREF = "..."> ... </A>", 
which is a link, according to the obtained information 
and information on the page being accessed, as follows. 
[0054] 

<HTML> 

<HEAD> 

<TITLE> 

Welcome Message (ABC Univ--Dept Info Sci ) 

</TITLE> 

</HEAD> 

<BODY> 

<H1> 

Welcome to ABC University <p>- -Department of 
Information Science . 
</Hl> 

Welcome to our WWW server! This is under 

development , though . 
<P> 

This WWW server is run by Department of 
Information Science , 

ABC University ( somewhere-cho , ABC , 

<A HREF="http:/ /www- 
out * company . co . jp/http : / /www . xyz . jp/ japan/ index . html" > J 
apan</A>), 

which is a new department 

established in 1990. 

We have a collection of images on the 
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Earth's environment (in preparation) and 

<A HREF="http:/ /www- 
out . company . co . jp/ht tp : / /www . is . university . ac . jp/FTP/im 
ages / sat /"> 

weather inf ormation</A> . 

We also serve 

<A HREF="http:/ /www- 
out . company . co. jp/http: //www. is .university . ac. jp/FTP/im 
ages/sat/gms .polar/ " > 

GMS (Himawari) images </A> 

for Chugoku/Shikoku area. 

<P> 

</BODY> 
</HTML> 

The information thus modified is provided from the 
gateway apparatus 1 to the client 14. The client 14 
displays the information to the user 13 as shown in 
Figure 8. It should be noted that the information 
displayed to the user 13 is identical whether the 
information is obtained directly from the server or 
indirectly through the gateway, because the changed 
link information is hidden from the user 13. That is, 
the two hypertexts given above are identical in 
appearance when displayed on the client 14. 
[0055] 

When the user 13 clicks the first link " Japan " 
with a mouse, for example, the URL "http: //www- 
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out . company . co . jp/ht tp : / /www . xyz . jp/ japan/ index . html " 
is specified on the client 14 and the exactly the same 
cycle described above is repeated. 
[0056] 

If a non-HTTP server (for example FTP or GOPHER 
server) external server to the company is to be 
accessed, a similar change is made* For example, the 
URL of information at an FTP server, 

f tp: //f tp.uvw. edu/gutenberg/etext93/pimill0 . txt 
may be changed as follows : 
[0057] 

http: //www- 
out . company . co . jp/f tp : / /f tp . uvw . edu/gutenberg/etex93/pi 
mill0.txt 

Thus, access from the client 14 internal to the 
company to the external gateway apparatus 1 machine is 
made by using HTTP. Access from the external gateway 
apparatus 1 to an external server 27 is made by using 
FTP. The gateway apparatus 1 machine converts the 
information obtained by using FTP into hypertext and 
returns the information to the client by using HTTP. 
In the hypertext conversion, the link is changed of 
course so that the gateway apparatus 1 is re-accessed. 
[0058] 

If the user 13 accesses the external server 27 
through the gateway apparatus 1 and the server 27 has a 
file such as Mac * Unix * Xll n , the hypertext 
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generating device 5 in the gateway apparatus 1 converts 
the file into a hypertext and returns the information 
to the client 14 by using HTTP. 
[0059] 

5 In this case, the client 14 will present the link 

Mac • Unix • Xll " to the user 13. Of course, the link 
is written so that the gateway apparatus 1 is re- 
accessed. 
[0060] 

10 [Advantages of the Invention] 

According to the present invention, an ordinary 
hypertext -based client can be used on a computer on a 
network internal to an organization to directly access 
a resource on an external network without scarifying 

15 security as has been described, and accordingly the 
working efficiency can be improved. 
[Brief Description of the Drawings] 
[Figure 1] 

Figure 1 is a diagram for explaining the principle 
20 of the present invention. 
[Figure 2] 

Figure 2 is a block diagram showing a 
configuration of a gateway apparatus in an embodiment. 
[Figure 3] 

25 Figure 3 is a diagram for explaining a hypertext 

changing device in the embodiment. 
[Figure 4] 
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Figure 4 is a diagram illustrating a hypertext 
generating device in the embodiment. 
[Figure 5] 

Figure 5 is a flowchart illustrating the 
embodiment . 
[Figure 6] 

Figure 6 is a diagram for explaining server access 
in the embodiment . 
[Figure 7] 

Figure 7 is a diagram for explaining a specific 
example of server access in the embodiment. 
[Figure 8] 

Figure 8 is a diagram showing a display screen in 
the embodiment . 
[Figure 9] 

Figure 9 is a diagram illustrating a first example 
of the conventional art . 
[Figure 10] 

Figure 10 is a diagram illustrating a second 
example of the conventional art . 
[Description of Symbols] 

1 Gateway apparatus 

2 Link analyzing device 

3 Various network services access control device 

4 Hypertext changing device 

5 Hypertext generating device 
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[Figure 1] 

Diagram for explaining principle of the invention 



2 


Link analyzing device 


3 


Various network services access control device 


5 5 


Hypertext generating device 


4 


Hypertext changing device 


#1 


Link information 


#2 


Access information 


#3 


Obtained information 


10 #4 


Hypertext 


#5 


Gateway apparatus 



[Figure 2] 

Diagram of configuration of gateway apparatus 



15 


7 


Network controller 




6 


Access monitor and control device 




2 


Link analyzing device 




3 


Various network services access control device 




5 


Hypertext generating device 


20 


4 


Hypertext changing device 




#1 


Network 




#2 


Information from server 




#3 


Control signal 




#4 


Link information 


25 


#5 


Access information 




#6 


Hypertext 




#7 


Obtained information 
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#8 Gateway apparatus 
[Figure 3] 

Diagram for explaining hypertext changing device 

41 Link replacing unit 

42 Link changing unit 

4 Hypertext changing device 
#1 Hypertext 

#2 Extracted link 

#3 Changed link 

#4 Hypertext changing device 

[Figure 4] 

Diagram for explaining hypertext generating device 

51 Hypertext generating unit 

52 Link setting unit 

5 Hypertext generating device 
#1 Obtained information 

#2 Hypertext 

#3 Control signal 

#4 Link 

[Figure 5] 

Flowchart in embodiment 

51 Access monitor and control device determines 
whether there is access from client 

52 Receives link information and provides it to link 
analyzing device 
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53 Link analyzing device extract access information 
and provides it to network services access control 
device 

54 Various network services access control device 
obtains specified information based on access 
information 

55 Is obtained information hypertext? 

57 Provides obtained information to hypertext 
generating device to change ordinarily generated 
link information by processing 

56 Provides obtained information (hypertext) to 
hypertext changing device to change link by 
processing 

58 Provides hypertext to access monitor and control 
device 

59 Access monitor and control device returns 
hypertext to client 

[Figure 6] 

Diagram for explaining server access in embodiment 
12 External network 
20 to 24 Server 
la, lb, 1c Gateway 

15 Router allowing only limited protocols to pass 
through it 

11 Internal network 
14 Computer 
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13 User 
[Figure 7] 

Diagram for explaining example of server access 
5 25 to 27 Server 

[Figure 8] 

Diagram for explaining display screen 

10 [Figure 9] 

Diagram for explaining first example of conventional 
art 

12 External network 

11 Internal network 
15 14, 16 Computer 

15 Router allowing only limited protocols to pass 
through it 

13 User 

20 [Figure 10] 

Diagram for explaining second example of conventional 
art 

12 External network 

11 Internal network to organization 
25 18 ZZZ server 
14, 16 Computer 
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15 Router allowing only limited protocols to pass 
through it 

17 Special client (using ZZZ) 
13 User 
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[0 0 10] ^cD^(cffij^60ir^r^ y ^ £St{£-T>5 

b 17 — ^ irtSPCO^^ h 9 — 2*:JV— $ (router) 20 
StSo ^IT, r<£)/w- ^Ttt-t^SriittS^o 
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LNET, FTP) IcAP^T, ^— h 
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[oo4o] rfuctiK -sroy- ht^^mwi 

a SriiDT^SBO^y h 17 — ^_hM£>£1r— ^2 0<DV 
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[0044] eyxtf, ra^^y hy-^icoy y— ^ 
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lftK"t~^o URL (Universal Resource Locator )t 
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http : // www. is. university, ac. jp/welcome. html 
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a hn/l/ffeSHTTP (Hyper Text Transfer Protoc 
ol) r&5 0 

I0047] r : //j £ r/j <oratt*— 

WSr^i-o £©»^tt»*S;ftfc*«as r www. is.univ 
ersity. ac. jpj <t V> ^^v'Vl^fc^^ £ LTV^S 

oas5>tt*<o*— /<-X?©«*<Z)^^ (path) a^£*t 
So ^<Dm<DWf&X~te rwelcome.htmlj rfc£ 0 
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v^*>0 % tt*i:tf:rt«)*y ttHTTPtit 

£W v^tf^B&SriEK: Twww. out. company, co. jp J £ 
U 1 2KttHTTPW^2 

5. 2 6tFTP(Dt-^2 7*KitrS)5, 
[0 0 4 9] fttOIC^—if 1 3 ttUR Ltlt Hittp : 
// www. is. university, ac. jp/welcome. html J Sr fcofc 

10 ofc£f£o !fl3B, ^-fil^c^URL^ 

[0 0 5 0] 



http : //www-out. company, co. jp/http : // www. is. university, ac. jp/welcome 
. html 



7^ b 1 4Mu r£>URLS:#PfcU HTTPT* 
v'^/^fe Twww-out. company, co. jp J <Dff — h ^--4?3k 
ttl JdT^"fe^f5o A— *tt. ttrt^s/M7 — 

t^jT^y i 4i^y— h ggg i (D-^^-^ic&m 

x-fif 1 ^i/y[:^Lt^i: LT Hittp : // ww 
<HTML> 
<HEAD> 
<TITLE> 



w. is. university, ac. jp/welcome. html J £r/jN"t~ 0 

[0 0 5 1 ] y— h <0^^^\^<D^-Xh 
*tfc^^Sr7EICHTTPt?1*:— /*2 5 (U— ^ r ww 
w. is. university, ac. jpj ) ICT^-fe;* Lte?T< o CIO 
20 b^x^^f l|j:fi^^ h?7-^ 1 2fcitt85S5 

«Lrv^0>-C[HJIIfc< *tLfeO^^V|CT^"fe^T# 

T<0± 5 fe or < S 0 

[0 0 5 2] 



Welcome Message (ABC Univ — Dept Info Sci ) 

</TITLE> 

</HEAD> 

<B0DY> 

<H1> 

Welcome to ABC University <p> — Department of Information Science. 
</Hl> 

Welcome to our WWW server! This is under development, though. 

<P> 

This WWW server is run by Department of Information Science, 
ABC University (somewhere-cho, ABC, 

<A HREF=*http : //www. xyz. jp/ japan/index. html*>Japan</A» , 

which is a new department 

established in 1990. 

We have a collection of images on the 

Earth's environment (in preparation) and 

<A HREF=VFTP/images/sat/"> 

weather information</A>. 

We also serve 

<A HREF=VFTP/iraages/sat/gms. polar/"> 
CMS (Himawari) images </A> 
for. Chugoku/Shikoku area. 
<P> 
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